Responses of the Federal Bureau of Investigation 
Based Upon the August 19, 2004 Hearing Before the 
Senate Committee on the Judiciary 
Regarding "The 9/11 Commission and Recommendations 
for the Future of Federal Law Enforcement and Border Security" 


Questions Posed by Senator Hatch 

1. The 9/11 Commission has recommended that the position of deputy National 
Intelligence Director ("NID") for homeland intelligence be filled by either the FBI’s 
executive assistant director for intelligence or the under secretary of homeland security for 
information analysis and homeland protection. Do you think this recommendation - by 
failing to specify precisely which official should hold the position - may create an 
unnecessary conflict between the FBI and the Department of Homeland Security ("DHS")? 
More generally, do you believe the FBI Office of Intelligence and the DHS Directorate for 
Information Analysis and Infrastructure perform similar functions, such that the heads of 
those entities would be interchangeable in the role of a deputy NID? 

Response : 


The FBI believes the Director of National Intelligence (DNI) should have one 
principal deputy. We believe the spirit of the 9/11 Commission recommendations 
can be better achieved through an intelligence coordinating council made up of 
NSC/HSC principals. 

2. You have served in leadership positions within two different components of the 
Intelligence Community, the National Security Agency and the FBI. Moreover, you have 
had an opportunity to view the cooperation, or lack of cooperation, among intelligence 
agencies at the highest levels. If the 9/11 Commission’s recommendations are adopted, you 
could end up serving as a deputy to the NID, as well as reporting to the FBI Director. 

Based on your experiences, do you think this type of "dual-hatting" can work? In your 
opinion, are there any conditions that might improve the likelihood of a successful merger 
of your potential NID and FBI roles? 

Response : 


We do not think a "dual-hatting" approach is the best answer. We are concerned 
about dual-hatting deputies who already have full time jobs, we may be 
replicating the situation underscored by the 9/11 Commission of intelligence 
community leaders having "too many jobs." In addition, maintaining the 
operational chain-of-command authority within the agencies that have the 
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to improve oversight of IT projects, to strengthen oversight of IT contracts, and to 
ensure that IT investments fully support the FBI's current and future missions. 

c. What is the current projection for the final, total cost of the project? 


Response : 


It is too early to estimate the total cost of the program. 

6. John Brennan, the Director of TTIC, testified on August 23, 2004, about the need to 
build an integrated information technology architecture, accessible to all members of the 
intelligence community. Do you agree? How would VCF or the Integrated Data 
Warehouse fit into this new architecture? 

Response : 


We agree with the need to build a government-wide integrated information 
architecture as outlined in the President’s Executive Order entitled Strengthening 
the Sharing of Terrorism Information to Protect Americans. In the FBI's work 
processes, VCF, or its successor software, will be ingest tools (like the Automated 
Case Support system is now) for the Investigative Data Warehouse (IDW). VCF 
or its equivalent will be the first point of ingest for investigative and intelligence 
information and for records collected by Agents and others. IDW then allows the 
data to be accessed, analyzed, and used in the production of intelligence. IDW 
minimizes the compartmentalization of intelligence and/or terrorism-related data 
developed by the FBI and would fit within this new architecture. It would also 
allow the interchange between agencies, with the proper security and access 
controls necessary to protect methods and sources. 

7. I understand that, after many millions of dollars spent, FBI agents now have the 
capability of e-mailing each other over a secure network. But I also understand that many 
field agents are still unable to send secure e-mails to other federal government agencies, or 
to state and local law enforcement and other entities outside the FBI. Is that true? If so, 
why does the FBI lack this basic capability, and what if anything is being done about it? 

Response : 


The FBI is faced with a unique challenge every day. Unlike other law 
enforcement agencies, we are responsible for communicating with the IC, other 
federal agencies, and our state and local partners in regional jurisdictions as it 
relates to our intelligence, counterterrorism prevention and criminal investigative 
responsibilities. This levies an enormous challenge on our IT resources and staff 
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The Inspection Division then obtained a copy of the Zyindex database from the 
OKBOMB investigation, which contained 167,000 documents, and obtained a 
comparison of the 15,200 documents from the "I" drive tapes, the 167,000 
OKBOMB documents, and the documents in the FBI's Automated Case Support 
system. This comparison identified 891 questionable documents. 

A CD-ROM containing the 891 questionable documents was forwarded to the 
Oklahoma City Division. Based on their knowledge of the documentation 
provided pursuant to the OKBOMB discovery process, the Oklahoma City 
Division was asked to determine whether any of these documents that should have 
been made available for discovery had, in fact, not been provided to the 
OKBOMB defense team. 

The Oklahoma City Division advised that, of the 891 questionable documents, 
only four had not previously been reviewed by members of the OKBOMB Task 
Force. Two of the documents were first drafts of FD-302s that were later changed 
so they could be uploaded to the FBI's Automated Case Support system; one 
document was an FD-71 complaint form that mentioned OKBOMB and was 
generated by the Denver Division; and the fourth document was unidentifiable. 

c. Were the existence and potential problems caused by the "I-drive" 
reviewed by the 9-11 Commission? 

Response : 


While the 9/1 1 Commission Report does not address the FBI's "I" drives, the 9/1 1 
Commission did review the FBI's data automation and technology processes, 
finding its information systems "woefully inadequate" during this period (page 77 
of the Commission's report). 

d. Can analysts access data and documents on the "I-drive" through the 
Integrated Data Warehouse? If not, why not, and do yon plan for this to change. 

Response : 


The purpose of the Integrated Data Warehouse (IDW) is to facilitate the analysis 
of data that has been collected and documented by FBI employees. While the 
IDW will utilize the FBI's network architecture to facilitate the analysis and 
sharing of data in FBI systems, it will not "see" or pull in data from the "I" drive. 
This is appropriate because the purpose of the "I" drive is to facilitate the mobility 
of the FBI's workforce by allowing employees to access their work-in-progress 
from any computer connected to the FBI network, and documents that have not 
been reviewed or approved by supervisors may contain inaccurate or incomplete 
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information. If this information were made available to all analysts, they would 
risk the possibility of reaching incorrect conclusions based upon unverified data. 
Once a document is approved, it is uploaded into the FBI's Automated Case 
Support system, from which information is retrievable and searchable by all 
employees. Except as described in question 11c, below, these documents could 
then be accessed by analysts through the IDW. 


e. Will the "I-drive" still exist once VCF is implemented? Please explain. 


Response : 

The "I" drive is a networked computer drive that allows computer users to retrieve 
items that they are working on from any computer connected to the network. This 
type of network architecture facilitates the mobile nature of the FBI's workforce, 
while providing the appropriate security for information and intelligence gathered 
by the FBI. These network drives are not designed as repositories of information; 
they are designed to facilitate work that is in progress. 

Because VCF, or its successor software, will permit documents to be drafted, 
reviewed, verified, and approved by supervisors within the workflow process 
defined by that software, the current use of the "I" drive will no longer be required 
after that software is deployed. Even then, however, networked drives that allow 
FBI employees to access their work in progress from any networked computer will 
still be a necessary part of the FBI's Enterprise Architecture. Consequently, while 
these shared drives may be called "I" drives or may use some other naming 
convention, shared drives will continue to have utility in the FBI, though for 
different purposes than the "I" drive is currently used. 

11. During your testimony, you said that "case files" were included in the Integrated Data 
Warehouse (IDW). It is my understanding that FBI case files include documents such as 
FD-302’s (interview memoranda), electronic communications, documents obtained by the 
FBI in the course of an investigation (and filed in "lA" envelopes with the case file), 
transcripts of wiretap recordings, as well as other materials. 

a. Please confirm that these items are included in a typical FBI "case file" 
and explain what, if any, other types of documents or materials are kept in a "case file." 

Response : 


The above listed items are kept in a case file. In addition to electronic 
communications (ECs), FD-302s (Form for information that may become 
testimony), and transcripts, other types of data stored in a case file include 
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Facsimiles, FD-542s (Investigative Accomplishment Reports), Inserts, Teletypes, 
Letter Head Memorandums (LHM), Memorandums, and other miscellaneous 
documents. 


b. Are all of these items accessible through the IDW? 


Response : 


Except for those items described below in item (c), all of these items are 
accessible through IDW. 

c. What if any documents or materials kept or maintained in an FBI "case 
file" are not accessible in IDW, and why? Please be specific. 

Response : 


Most, but not all, electronic documents or materials kept in an FBI case file are 
accessible through IDW. A small number of case file documents that identify 
specific types of data too sensitive for all IDW users are not accessible through 
IDW. For example, information that reveals the identities of informants, 
information on public corruption investigations, and some administrative "case 
files" such as FBI employee disciplinary actions would not be accessible. 

Prior to September 11, 2001, information in case files was primarily restricted to 
agents directly involved with the respective cases. Following September 11, 

2001, Director Mueller established an "open data" policy, which permitted FBI 
analysts to access all data in FBI systems, with the exception of the most sensitive 
files identified by the BAD for Counterterrorism/Counterintelligence. This policy 
change allowed counterterrorism analysts to make more effective use of the FBI’s 
collected data. 

In accordance with the "open data" policy, the IDW system allows users to access 
all data in the system, although "need-to-know" principles still apply. The 
restrictions described above are intended to protect the FBI’s most sensitive data 
from threats such as that posed by Robert Hanssen. To further protect against this 
type of threat, IDW audits all user activity. 

As is further described in part (d) below, the FBI is aggressively developing a 
more advanced security system that would allow all documents to be included in 
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the data warehouse, with strict protections applied to the most sensitive 
documents. 

In order to ensure that FBI policies create the most effective counterterrorism 
environment possible, Director Mueller established an Information Systems 
Policy Board that is charged with reviewing existing policies, modifying policies 
when necessary, and establishing new policies as needed to respond to a changing 
environment. 

d. For any documents or materials not accessible through IDW, please detail 
how the FBI currently searches for data in such documents or materials, and how or 
whether the search is conducted differently today than it was prior to September 11, 2001. 
For documents not currently accessible in IDW, when will the FBI will be able to access 
such materials electronically? 

Response : 


The documents not available through IDW are currently accessed through their 
original sources' systems, as they were prior to September 11, 2001 . However, the 
access rules applied to these systems have changed in response to the events of 
September 1 1 to provide greater access and enhanced auditing features. This 
provides a greater ability to locate and disseminate data than the FBI had prior to 
September 11, 2001. 

The FBI is actively working on a project based on the IDW system that will add a 
more robust security layer, which includes the detailed discretionary access 
controls required for the FBI’s most sensitive files. The FBI anticipates 
completion of the testing and evaluation of the new technology in the summer of 
2005. If additional funding is secured, the FBI will initiate the process of loading 
the excluded documents described in part (c) above into the system with 
appropriate protections. Access will then be expanded to the full user base of 
IDW. 

e. Is it true that IDW access to materials in an FBI "case file" is limited to 
only that information that has been typed by an agent or support personnel into an FD-302 
or other report? 

Response : 


This is not true. There is a great deal of information in IDW other than that which 
has been typed by an agent or support personnel into an FD-302 or other report. 
With only the exceptions described in part (c) above, users have access to all 
electronic data that is stored in ACS, as well as other paper records which have 
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been automatically scanned and converted into computer text. These scanned 
documents include Bureau-generated doeuments related to terrorism, as well as 
other terrorism-related documents such as those seized in Afghanistan and 
Pakistan. Also large quantities of data from other agencies, including DIA, NSA, 
CIA, DOS, and FinCEN have been ingested into IDW. 

f. Are all investigative materials obtained by the FBI by subpoena, by NSL 
or by other means always reviewed contemporaneously and summarized in report form, 
such that they are accessible through the IDW? If not, why not? 

Response : 


All investigative materials obtained by the FBI by subpoena, NSL, or by other 
means (such as that provided by 18 U.S.C. §2703) are reviewed 
eontemporaneously. Not all investigative materials reviewed are deemed 
pertinent to a case. Those materials that are reviewed and deemed pertinent to a 
case are either summarized, in which the case summary is loaded into ACS, or the 
entire document is scanned, if necessary, and uploaded in its entirety into 
IntelPlus. 

Many of the largest IntelPlus file rooms have been imported into IDW, so these 
documents would be accessible through the IDW in both text form and the 
original scanned images. Summaries loaded into ACS would be accessible 
through the IDW, except as noted in answer 1 1(c). 

The only investigative materials that would not be available through the IDW are 
those that were not deemed pertinent to a case, those that were added to an 
IntelPlus file room that has not yet been incorporated into IDW, or those that are 
too sensitive to load into IDW, as described in answer 1 1(c). 

g. What is the time frame for the dataset "case file" material that is 
currently accessible by IDW? In other words, are FD-302s that were written in 1995, 

1990, or even prior to 1985 accessible? 

Response : 


The time frames for the datasets vary. Except as noted in part (c) above, all data 
stored in ACS, including FD-302s, are available in IDW. Since ACS was created 
in 1995, EDW contains ACS data from 1995 to present. IDW also contains 
millions of scanned paper documents, including those seized from suspected 
terrorists. Although the FBI knows the dates these documents were added into 
IDW, the date of origin of many of these documents is unknown. 
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As additional data sources continue to be added into IDW, most contain records 
dated prior to the date of ingest. All of this "day back" information will be 
included in IDW. The specific date ranges of the data will vary by source, and 
may include data prior to 1985. For example, IDW includes all CIA Intelligence 
Information Reports (HR) at the Secret or lower classification levels issued from 
1978 to present. Conversely, most data sources provide updates of new data 
created after the initial date of ingest. These "day forward" updates will continue 
to be added into IDW and appended to the appropriate data libraries. 

h. You gave a "specific example" in order "to show this set of data that 
included a lot of different things, including case files, but not all case files, but terrorism 
information." Can you explain what you meant by this statement including the phrase 
"but not all case files, but terrorism information"? 

Response : 


The statement was intended to emphasize that the set of data includes terrorism 
information. The statement could be more clearly conveyed using two sentences: 
"The IDW included a lot of different types of data, including case files. IDW may 
not currently include all case file data (as discussed in question 1 l.c. above), but it 
does include terrorism information." 

12. In early 2003, Director Mueller described the IDW as a future goal of the FBI that 
would encompass "31 different databases" and would be used to help the FBI conduct 
"data mining." 


a. Please identify and provide a brief explanation of each database currently 
included in, or currently planned to be included in, the IDW. Approximately when was 
each database made accessible through IDW? 

Response : 


The following data sources are currently available through IDW. Other data 
sources that are planned to be added, pending approval by the Policy Board and 
the Office of General Counsel’s (OGC) review of the Privacy Impact Assessment, 
are listed below in the response to (b). 

Currently Included (Added Prior to January, 2004): 

• Automated Case System (ACS), Electronic Case File (ECF) 

• Secure Automated Messaging Network (SAMNet) - copies of all 
messaging traffic sent either from the FBI to other government agencies, 
or sent from other government agencies to the FBI through the Automated 
Digital Information Network (AutoDIN). 
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• Joint Intelligence Committee Inquiry (JICI) Documents - scanned copies 
of all FBI documents related to extremist Islamic terrorism between 1993 
and 2002. 

• Open Source News - various foreign news sources that have been 
translated into English, as well as a few large U.S. publications, such as 
the Washington Post. 

• Violent Gang and Terrorist Organization File (VGTOF) - lists of 
individuals and organizations associated with violent gangs and terrorism, 
provided by the FBI National Crime Information Center (NCIC) 

Currently Included (Added Between January 2004 and Present): 

• 1 1 Financial Crimes Enforcement Network (FinCEN) Databases - data 
related to terrorist financing 

• 2 Terrorist Financing Operations Section Databases - biographical and 
financial reports on terrorism-related individuals 

• 1 1 Scanned document libraries - millions of scanned documents related to 
FBI’s major terrorism-related cases 

• CIA Intelligence Information Reports (HR) and Technical Disseminations 
(TD) - copy of all IIRs and TDs at the SECRET security classification or 
below that were sent to the FBI firom 1978 to present 

• Foreign Financial List - copies of information concerning terrorism- 
related persons, addresses, and other biographical data submitted to U.S. 
financial institutions fi’om foreign financial institutions 

• Selectee List - copies of a Transportation Security Administration (TSA) 
list of individuals that warrant additional security attention prior to 
boarding a commercial airliner 

• Terrorist Watch List (TWL) - the FBI Terrorist Watch and Warning Unit 
(TWWU) list of names, aliases, and biographical information regarding 
individuals submitted to the Terrorist Screening Center (TSC) for 
inclusion into VGTOF and TIPOFF watch lists 

• No Fly List - copy of a TSA list of individuals barred from boarding a 
commercial airplane 

• Universal Name Index (UNI) Mains - copy of index records for all main 
subjects on FBI investigations, except as mentioned in part (c) of question 
11 above. 

• Universal Name Index (UNI) Refs - copy of index records for all 
individuals referenced in FBI investigations, except as mentioned in part 
(c) of question 1 1 above. 

• Department of State Lost and Stolen Passports - copy of records pertaining 
to lost and stolen passports 

• Department of State Diplomatic Security Service - copy of past and 
current passport fi'aud investigations from the DOS DDS RAMS database 
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Planned Data Sources: 

• (See part b below) 

b. You stated in your testimony that the FBI "through a policy board" is 
looking speciflcally at IDW and trying to add to the data sets that are in there. How does 
the policy board operate and what other databases are being considered for inclusion in the 
IDW? 


Response : 

The Director created an Information Sharing Policy Group, co-chaired by the 
Executive Assistant Director - Intelligence and the Executive Assistant Director - 
Administration. This group reviews all requests for new data, as well as the 
dissemination controls imposed upon data sets. Before a data set can be approved 
by the policy board, or dissemination controls can be changed, the FBI’s OGC 
must review and approve a Privacy Impact Assessment for the requested change. 

Other primary data sources being considered include the FBI’s Telephone 
Application, DHS data sources such as US-VISIT and SEVIS, Department of 
State data sources such as the Consular Consolidated Database (CCD), and 
Treasury Enforcement Communication System (TECS). Some of these sources 
will include very large amounts of data and funding has not yet been identified to 
complete their integration. 

c. Does the FBI use IDW for "data mining?" If so, please describe the 
process, and indicate its effectiveness and reliability. 

Response : 


In its original statement, the FBI used the term "data mining" to be synonymous 
with "advanced analysis." The FBI does not conduct "data mining" in accordance 
with the GAO definition, which means mining through large volumes of data with 
the intention of automatically predicting future activities. 

IDW allows for advanced analysis of large amounts of data, such as extracting all 
individuals from Suspicious Activity Reports and comparing the information 
against all individuals extracted from FBI terrorism investigations to look for 
overlap. All results are passed to FBI analysts for evaluation and fiirther analysis. 
The FBI does not automatically generate predictions from IDW. Rather, it uses 
IDW to assist in identifying the most relevant elements of information that will 
allow trained analysts to make informed evaluations and predictions. This 
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approach saves analysts valuable time in gathering information from various 
sources, and has proven highly reliable. 


d. Can other government agencies (federal, state or local) access IDW and if 

so, how? 

Response : 

Other government agencies can access IDW through their representatives to FBI 
Joint Terrorism Task Force (JTTF) members. JTTF members, including many 
federal, state, and local agencies, have been issued IDW accounts, and can access 
the system through any FBI computer connected to the FBI Intranet. These 
, individuals must have completed background checks and been granted Top Secret 
clearances before they are granted access to FBI computers. 

13. Do all FBI agents have access to the IDW on their desktops? If not, who has direct 
access to IDW? If agents do not have direct access, why not, and when can we expect them 
to have such access? Do you agree that it is important for the field agents to have access to 
all data at their fingertips in order to be able to react quickly in matters involving national 
security? 

Response : 

IDW is accessible from any FBI desktop; however, not all FBI agents have 
accounts. The Office of Intelligence Oversight Unit is responsible for evaluating 
user needs and prioritizing the creation of user accounts. Policy established by the 
Oversight Unit places priority on Field Intelligence Group members, and members 
of the Joint Terrorism Task Forces, in addition to the headquarters 
counterterrorism analysts that made up the initial user base. Since January 2004, 
IDW has issued more than 5,000 user accounts in accordance with the established 
policy. 

The FBI agrees that it is important for field agents to have access to the data sets 
provided by IDW. The FBI intends to continue adding accounts and increasing 
the capability of the system accordingly; however, current funding does not 
support the provision of service to all FBI agents and analysts. 

14. You also stated that the FBI can now do a "multi-word search" of data that is included 
in IDW. When was this capability made available through IDW? It is my understanding 
that these "multi-word searches" are still a long way from the type of multi-word searches 
that have become commonplace using the Internet or other search engines such as 
Lexis/Nexis or Westlaw. Thus, while the FBI can use multiple search terms like "flight 
school" and "lessons" to obtain some documents, it is my understanding that the FBI still 


20 



cannot And words within a certain deflned parameter of one another. There may also be 
significant limitations when variations of spelling are used. Please explain in detail the 
types of searches of IDW that are currently available to FBI agents and any types of 
searches that are n^ currently available that you plan to add. Please include a timeline for 
any currently planned improvements to the search capability of your computer technology. 

Response : 


IDW included multi-word search ability when it was activated January of 2004. It 
provides greater search capability than that available through the Internet. Users 
can search for terms within a defined parameter of one another. For example, the 
search: ‘flight school’ NEAR/10 ‘lessons’ would return all documents where the 
phrase "flight school" occurred within 10 words of the word "lessons." Users can 
also specify whether they want exact searches, or if they want the search tool to 
include other synonyms and spelling variants for words and names. Users can 
also combine all of these text search abilities with structured queries, such as 
limiting data by date ranges or FBI case classifications, within a single search. 

IDW is also capable of extracting concepts such as names, phone numbers, and 
company names fi’om unstructured text documents. This ability allows an IDW 
user the ability to perform concepts-related searches, rather than a list of 
documents. Users can then select concepts from the list, and browse through a 
series of related concepts that were extracted from the same document set. For 
example, a user could query information on a terrorist organization and retrieve a 
list of names extracted from documents about the terrorist organization. The user 
can then select a name from the list, and view a list of phone numbers extracted 
from the subset of documents that mention the selected name. At any point, the 
user can select a concept and view all related source documents for further 
analysis. This is a very powerful analytical method that is fundamentally different 
than standard search engines available through the Internet. 

These capabilities are currently functional and available to all users. We are 
working on enhancing our ability to conduct multiple, large "batch queries." The 
example of advanced analysis provided in question 12(c), where the complete set 
of Suspicious Activity Reports is compared to the complete set of FBI terrorism 
files to identify individuals in common between them, is one type of "batch 
query." 

15. The third phase of Trilogy - the Virtual Case File System, or VCF - was meant to 
replace the Automatic Case Support System (ACS). I took from your testimony that IDW 
is now adequately accessing ACS to ensure that all FBI information is capable of and is 
actually being mined for intelligence analysis and as an investigative tool. Many millions of 
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dollars have been spent in preparing for VCF and millions more will be spent to see that it 
is implemented. 


a. Why is VCF still necessary if IDW and ACS are doing the job? 


Response : 


IDW addresses a subset of FBI investigative data while VCF, or its successor 
software, will provide access to all data resident in ACS. VCF and its successor 
software will provide enhanced workflow and case management functionality 
including the ability to search through various records, while that access is 
transparent to the user. 

b. How(ifatall) will VCF differ from IDW/ACS? In other words, will VCF 
be faster, easier, or more accessible to more agents and analysts? Will it have more 
sophisticated searching capabilities? 

Response : 


VCF, or its successor software, will far exceed the current ACS capabilities. It 
will essentially migrate the FBI from a "green screen" to a web interface, leaping 
several generations of technology. This capability will provide a faster and more 
user friendly interface for the agents and analysts. The greatly improved search 
capabilities will significantly improve their overall effectiveness and efficiency. 
VCF, or its successor software, also will contain a considerably larger repository 
of records than the IDW. 

c. How is the continued delay of VCF’s implementation adversely affecting 
the FBI’s abilities? 

Response : 


The current paper-oriented workflow requires added time for data to be entered 
into the system of record, thereby delaying access to others. In addition, the lack 
of a search capability across records limits the FBI’s ability to perform its 
intelligence and investigative functions. Despite the FBI’s delay in implementing 
VCF, the FBI has achieved savings through the use of IDW. 

d. The OIG noted in its September 2003 report that "unlike the currently 
used ACS system, agents will not be able to circumvent the use of the VCF." What do you 
understand that statement to mean and how does the ability of agents to circumvent ACS 
affect the IDW search engines? 
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Response : 


Currently, the lack of controls with ACS prevents some users from submitting 
data in order to protect sources. VCF and its successor software will provide 
access controls that will require users to submit required data fields without later 
revealing critical source information to IDW users. 

e. The same September 2003 OIG report stated that with the release of VCF, 
agents will be provided with "content management capability" to "help agents access 
information from the FBI’s data warehouse, regardless of where in the system the 
information was entered, [and] provide a single query for all of the FBI’s systems that are 
connected to the Integrated Data Warehouse." Since VCF is still delayed, do the agents 
have this "content management capability" at this time and if not, when can we expect this 
capability to be in place? 

Response : 


Agents do not currently have content management capability. 

16. The OIG once described VCF as a "web-based ‘point and click’ case management 
system" through which "agents are expected to have multi-media capability that will allow 
them to scan documents, photos, and other electronic media into the case file." Am I 
correct that the FBI does not have that ability at present and that, therefore, scanned 
documents, photos and other electronic media are not accessible through the IDW at this 
time? 

Response : 


The FBI currently has the ability to make scanned documents and other electronic 
media available through the IDW. 

VCF, or its successor software, will simplify the process of scanning documents 
and photos, and adding other electronic media into the case files, but it is still 
possible with current systems. Agents can use scanners provided by Trilogy, as 
well as the more robust services provided by the Document Conversion 
Laboratory (DOCLab) and Document Exploitation group (DocEx) to convert data 
into electronic form. Millions of these scanned documents have already been 
loaded into IDW and are available to users. In addition to scanned document 
libraries, the Violent Gang and Terrorist Organization File (VGTOF) library 
already has photographs imbedded with the electronic records and are accessible 
through IDW. 
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17. Earlier this year, with Senators Hatch, Grassley and Durbin, I asked the Government 
Accountability Office (GAO) to review the approximately $600 million in costs attributed 
to the Trilogy system, which is still not in place. Can you assure me the FBI is fully 
cooperating with the GAO’s audit, and doing so on a timely basis? Please explain what you 
are doing internally to ensure that the GAO is getting the materials it needs. 

Response : 


The FBI has and will continue to cooperate fully with the GAO auditors by 
providing timely, accurate, and complete information. Materials and information 
in response to GAO’s requests have been provided. As an interim step to ensure 
the GAO is receiving the requested material in a timely fashion, in lieu of waiting 
until all material in response to a single request is available, the FBI will provide 
the information incrementally. 

18. The September 2003 OIG report on Trilogy also commented upon the problems at the 
FBI regarding entry of foreign names into the FBI’s existing databases (ACS) and 
explained that VCF would facilitate indexing on various web-based documents by 
providing data fields in searchable databases. 

a. Does this mean, for example, that a VCF search of materials about 
Moammar "Gadhafi" will yield reports that spell the Libyan leader’s name as Qaddafi, 
Qatafi, Quahthafi, Ghadafi, Kadafi or Kaddafl? 

Response : 


The VCF design included a wildcard search ability, but in its initial release would 
not have searched across name variants. In later releases, VCF was planning to 
incorporate Language Analysis Services (LAS), which has a robust name 
expansion utility to provide this service. 

IDW has partially integrated LAS, and has already used it to support critical 
investigations, such as the 2003 holiday threat. This allowed IDW to expand a 
name into alternate spelling variants for comprehensive searching and analysis. 
This capability continues to be available to support special cases, and IDW plans 
to complete the integration and expose the name expansion capability to end users 
in a future release. Current funding, however, does not include this integration. 

At present, IDW allows users to manually create name expansion lists that would 
allow IDW to search across all identified variants. If LAS were fully integrated, 
users would have the option of manually creating a list, or using the automatic 
expansion provided by LAS. 
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b. Regarding IDW’s capabilities as you described them in your testimony, 
are fundamental spelling issues still causing problems in search engines? Please explain 
how, if at all, VCF will rectify this situation. 

Response : 


IDW includes the ability to search across spelling variants for common words, 
synonyms and meaning variants for words, as well as common misspellings of 
words. If a user misspells a common word, IDW will run the search as specified, 
but will prompt the user to ask if they intended to run the search with the correct 
spelling. In addition, users can create a list of name variants they wish to use and 
IDW will search across all identified name variants. As mentioned in the question 
18(a), it is anticipated that VCF (or its successor software) and IDW will 
incorporate the capabilities provided by LAS that would provide automatic 
expansion of name variants. 

19. On April 8, 2004, the Subcommittee on Terrorism, Technology and Homeland Security 
of the Senate Judiciary Committee held a hearing on "Keeping America’s Mass 
Transportation System Safe: Are the Laws Adequate?" At that time, I posed a written 
question to the Amtrak representatives about whether or not rail police have direct access 
to law enforcement records systems while performing pedestrian and vehicle 
investigations. A copy of Amtrak’s response is attached as Exhibit A to these Written 
Questions. Please provide your position on the legislative proposal suggested by Amtrak in 
which rail police that are certified and commissioned law enforcement officers would be 
provided equal footing with state and local law enforcement for purposes of access to 
criminal history data. 

Response : 


28 U.S.C. § 534(4)(d)(l) authorizes the Attorney General to exchange records and 
information with railroad police departments which perform the administration of 
criminal justice, have arrest powers pursuant to a state statute, allocate a 
substantial part of their budget to the administration of criminal justice (defined in 
28 C.F.R. Part 20, Subpart A), and meet the training requirements established by 
law or ordinance for law enforcement officers. 

Under this authority, upon request, the FBI assigns Originating Agency Identifiers 
(ORIs) to railroad police departments meeting the criteria of 28 CFR Part 20. A 
National Crime Information Center (NCIC) ORI is a nine-character alpha-numeric 
identifier assigned to authorized agencies, permitting access to the NCIC 
Interstate Identification Index (III). Amtrak has been assigned eight ORIs that 
permit access to NCIC/III for criminal justice purposes. 
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